Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/4e7f35bb-a42c-3fde-87d6-a22b0cf331d1.roa
File:                     4e7f35bb-a42c-3fde-87d6-a22b0cf331d1.roa (raw, json)
Hash identifier:          1lnAF1MM7a1/6YGJ9x1TdAkKoGGEH3gxn7V0khA9rps=
Subject key identifier:   0D:D6:73:99:B3:8C:2F:54:28:FE:73:20:96:D5:A7:37:F3:BD:7B:FA
Certificate issuer:       /CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
Certificate serial:       010D0C9F4328584AE0311E5BD09599E683F68880
Authority key identifier: 10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/4e7f35bb-a42c-3fde-87d6-a22b0cf331d1.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     6079
IP address blocks:        199.187.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:1e:5b:d0:95:99:e6:83:f6:88:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44d3fac-ab99-4b37-a42e-dbf67a95c460
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=9b83b61e-76e0-4cf0-a6d2-a8244ccd891c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4c:df:4b:65:de:54:9d:ec:22:a6:2e:fd:e0:
                    52:c2:db:33:fe:21:20:3f:c1:7f:9a:92:10:db:68:
                    a6:29:89:9f:79:08:d6:55:68:9c:17:52:cb:ca:e0:
                    1d:2c:db:1b:d6:52:00:00:a7:2f:52:b0:b1:e8:a4:
                    dd:7f:d3:2e:80:1c:30:bf:e8:57:18:39:f8:16:eb:
                    e9:58:df:7b:f3:ab:60:34:db:45:85:d9:d2:f9:17:
                    e2:db:6b:ed:ba:bb:ef:3d:4e:30:f7:64:43:91:3b:
                    eb:a1:45:b3:d2:81:1d:12:21:28:7e:9c:33:84:d4:
                    1b:65:c6:84:7d:ce:f2:1c:fd:f4:ab:ea:98:fe:f8:
                    a2:9f:1c:83:35:e3:8e:c0:76:92:b5:a1:d7:4c:f9:
                    70:04:85:bf:93:52:87:cd:6b:e0:c4:2e:4f:ed:a4:
                    c4:8e:14:d1:c6:18:c4:53:e1:a5:ed:a2:48:4a:d8:
                    2d:49:8d:55:50:18:fb:c4:50:7f:d5:a8:10:4f:e6:
                    6f:b6:4f:64:3a:f6:3a:2b:6b:2b:c4:91:ae:09:d6:
                    87:0d:30:30:5e:04:ce:36:c9:ef:a8:f3:c4:15:06:
                    be:8e:65:a9:30:15:72:b0:2d:48:18:ad:08:17:05:
                    f6:69:06:0c:58:c4:a6:b4:92:ed:97:94:05:61:71:
                    43:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D6:73:99:B3:8C:2F:54:28:FE:73:20:96:D5:A7:37:F3:BD:7B:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/4e7f35bb-a42c-3fde-87d6-a22b0cf331d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460/d44d3fac-ab99-4b37-a42e-dbf67a95c460.crl

            X509v3 Authority Key Identifier:
                keyid:10:77:E4:74:A6:2D:64:5B:43:F0:7E:38:D7:5F:B6:CE:AB:37:5B:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d44d3fac-ab99-4b37-a42e-dbf67a95c460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:23:84:07:36:c1:78:22:e4:6e:42:59:f6:e0:a9:cb:90:33:
         3c:4d:a3:1c:57:72:62:fb:4c:12:e2:66:03:38:48:31:12:f1:
         cc:93:c0:67:a7:0a:ab:0b:91:57:88:8e:4d:58:20:74:66:3f:
         42:ed:82:4e:91:cb:00:ac:a2:e1:cc:53:41:08:c7:06:e3:65:
         29:71:92:89:81:a5:26:88:38:dc:46:6b:d3:43:99:82:d9:45:
         3d:b4:1e:79:a8:0b:8b:3e:2b:dd:89:da:ee:2a:b9:11:92:a8:
         69:84:17:d6:4a:c0:1f:f4:c3:7c:b2:7a:e2:a2:67:cb:49:19:
         af:38:00:14:e5:7a:3c:90:17:51:a0:b0:95:24:e5:26:6b:88:
         07:36:0c:28:f3:b4:66:03:f0:be:ed:da:c9:d7:36:b7:46:ed:
         a2:4b:8e:d6:a9:af:a5:7b:88:3a:61:1b:fc:ea:87:b6:17:29:
         be:b2:9b:46:56:18:4b:45:0a:45:75:4b:56:70:68:a4:7d:2b:
         d5:19:94:80:ab:cf:79:d4:52:17:1f:77:97:52:65:66:bd:cb:
         72:4a:13:5b:48:24:6c:4b:35:56:84:1c:16:7e:c4:f0:4f:73:
         63:4d:19:c2:b7:26:3e:27:1a:fb:16:f0:ef:25:e6:66:54:6d:
         c2:ca:f0:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 22:47:14 2025 by rpki-client